Skip to content
Branch: master
Find file History
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Type Name Latest commit message Commit time
Failed to load latest commit information.
GetEventLogReport.ps1 Added date/time unique tag to file name of report Oct 16, 2015 Removed Apache license and added wincollect readme Oct 16, 2015
reportsample.png Moving Files around Oct 16, 2015

Example EPS rate report for several Windows hosts Example Report


The Get Event Log Report script allows administrators to chart the EPS rate of a local or remote Windows host based by polling the Event Log. The PowerShell script must be run as an administrator and is capable of creating EPS rate reports for local, remote, or all Windows hosts within the domain where the script is run.


  • PowerShell v3.0 or v4.0 is required. For more information on PowerShell or downloads, see the following website:
  • PowerShell must be run as local admin & users must run Set-ExecutionPolicy RemoteSigned to use this script.
  • To use option 3 for domain scans, Powershell domain cmdlets must be installed.
  • This script can be run on any Windows host at Windows XP or above.
  • For Windows 2003 Server and Windows XP, remote EPS data collection uses WMI to remotely read the Windows Event Log. If there are network firewalls between Windows hosts, then standard WMI ports might need to be opened to prevent connection error messages.


This Powershell script includes three options for data collection:

  • Local Host: Scan the event log(s) of the local host to create a report of the Events Per Second (EPS) rate.
  • IP List: Scan a list of IP addresses provided by the user. The remote systems are scanned and a report is created for each IP address.
  • Domain: Scan the local domain where the script is run to create an EPS rate report for all of the Windows hosts within the domain. Powershell domain cmdlets must be installed to use this option.


  1. Download the Powershell script.
  2. Copy the script to a Windows host.
  3. Launch Microsoft Powershell as an administrator.
  4. Type Set-ExecutionPolicy RemoteSigned.
  5. If prompted to update the policy, select Yes.
  6. Open GetEventLogReports.ps1 in Powershell.
  7. Run the GetEventLogReports.ps1 script.
  8. Select one of the following options:
    • Local Host -- Creates a CSV file of EPS rate data for the local host.
    • IP List -- Creates a CSV report for the list of IP addresses specified.
    • Domain -- The script must be run within the Domain specified.
  9. Follow the on-screen prompts to create the EPS report.
  10. Select a location to save the report data.
  11. A summary details an success or error messages and the location of the report.

Author information

Authors: Jamie Wheaton & William Delong


Copyright (c) 2015 IBM

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

You can’t perform that action at this time.